renamed icarus mngt to hosting mngt

deploy/flux/hosting-mngt/fluxcd-kustomization.yaml

@@ -1,12 +1,12 @@
 apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
-  name: icarus-nodes-mngt
+  name: hosting-mngt
 spec:
   interval: 1m
   sourceRef:
     kind: GitRepository
     name: nodes-mngt
     namespace: chimera-limbosolutions-com
-  path: deploy/icarus-mngt
+  path: deploy/hosting-mngt
   prune: true

deploy/flux/hosting-mngt/kustomization.yaml

@@ -1,6 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: icarus-nodes-mngt
+namespace: hosting-mngt
 resources:
   - fluxcd-kustomization.yaml
   - secrets

deploy/flux/hosting-mngt/secrets/kustomization.yaml

@@ -1,8 +1,8 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: icarus-nodes-mngt
+namespace: hosting-mngt
 secretGenerator:
-  - name: icarus-ansible
+  - name: ansible-secret
     files:
       - ansible_vault_password=.env.d/ansible_vault_password
       - ansible_become_password=.env.d/ansible_become_password

deploy/hosting-mngt/cronWorkflows/crictl-prune.yaml

@@ -2,7 +2,6 @@ apiVersion: argoproj.io/v1alpha1
 kind: CronWorkflow
 metadata:
   name: crictl-prune
-  namespace: icarus-nodes-mngt
 spec:
   schedules:
     -  "0 0 * * *"
@@ -19,7 +18,7 @@ spec:
         steps:
           - - name: script-exec
               templateRef:
-                name: icarus-ansible-script
+                name: hosting-mngt-ansible-script
                 template: raw-source
               arguments:
                 parameters:

deploy/hosting-mngt/cronWorkflows/kustomization.yaml

@@ -1,5 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
+namespace: hosting-mngt
 resources:
   - crictl-prune.yaml
 generatorOptions:

deploy/hosting-mngt/infra/kustomization.yaml

@@ -1,9 +1,9 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: icarus-nodes-mngt
+namespace: hosting-mngt
 resources:
   - argo-runner-sa.yaml
-  - icarus-nodes-mngt-tbot-config.yaml
+  - tbot-config.yaml
 generatorOptions:
   disableNameSuffixHash: true
 

deploy/hosting-mngt/infra/tbot-config.yaml

@@ -1,8 +1,7 @@
 apiVersion: v1
 kind: ConfigMap
 metadata:
-  name: icarus-nodes-mngt-tbot-config
+  name: hosting-mngt-tbot-config
-  namespace: icarus-nodes-mngt
 data:
   tbot.yaml: |
     version: v2
@@ -10,7 +9,7 @@ data:
     on_one_shot: "exit"
     onboarding:
       join_method: "kubernetes"
-      token: "icarus-nodes-mngt"
+      token: "hosting-mngt"
     storage:
       type: "memory"
     services:

deploy/hosting-mngt/kustomization.yaml

@@ -1,10 +1,11 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: icarus-nodes-mngt
+namespace: hosting-mngt
 resources:
   - infra
   - cronWorkflows
   - workflowTemplates
+  - mylimbo-ansible-collections-global
 generatorOptions:
   disableNameSuffixHash: true
 

deploy/hosting-mngt/mylimbo-ansible-collections-global/fluxcd-kustomization.yaml

@@ -2,7 +2,7 @@ apiVersion: kustomize.toolkit.fluxcd.io/v1
 kind: Kustomization
 metadata:
   name: mylimbo-ansible-collections-global
-  namespace: icarus-nodes-mngt
+  namespace: hosting-mngt
 spec:
   interval: 1m
   sourceRef:
@@ -11,4 +11,4 @@ spec:
     namespace: chimera-limbosolutions-com
   path: mylimbo-ansible-collections-global
   prune: true
-  targetNamespace: icarus-nodes-mngt
+  targetNamespace: hosting-mngt

deploy/hosting-mngt/mylimbo-ansible-collections-global/kustomization.yaml

@@ -1,6 +1,6 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
-namespace: icarus-nodes-mngt
+namespace: hosting-mngt
 resources:
   - fluxcd-kustomization.yaml
 

deploy/hosting-mngt/teleport-manifests/README.md

@@ -0,0 +1,6 @@
+# teleport
+
+``` bash
+tctl create -f deploy/hosting-mngt/teleport-manifests/manifest.yaml
+tctl bots update hosting-mngt --add-roles hosting-mngt
+```

deploy/hosting-mngt/teleport-manifests/manifest.yaml

@@ -2,7 +2,7 @@ kind: bot
 version: v1
 metadata:
   # name is a unique identifier for the Bot in the cluster.
-  name: icarus-nodes-mngt
+  name: hosting-mngt
 spec:
   roles: []
 
@@ -12,7 +12,7 @@ spec:
 kind: role
 version: v6
 metadata:
-  name: icarus-nodes-mngt # use the auto created bot role (created by bot yaml)
+  name: hosting-mngt
 spec:
   allow:
     # Allow login to the user 'ansible'.
@@ -27,11 +27,11 @@ spec:
 kind: token
 version: v2
 metadata:
-    name: icarus-nodes-mngt
+    name: hosting-mngt
 spec:
     roles: [Bot]
-    bot_name: icarus-nodes-mngt
+    bot_name: hosting-mngt
     join_method: kubernetes
     kubernetes:
         allow:
-          - service_account: icarus-nodes-mngt:argo-runner
+          - service_account: hosting-mngt:argo-runner

deploy/hosting-mngt/workflowTemplates/hosting-mngt-ansible-script.yaml

@@ -1,12 +1,12 @@
 apiVersion: argoproj.io/v1alpha1
 kind: WorkflowTemplate
 metadata:
-  name: icarus-ansible-script
+  name: hosting-mngt-ansible-script
   labels:
     workflows.argoproj.io/archive-strategy: "false"
   annotations:
     workflows.argoproj.io/description: |
-      icarus ansible script
+      hosting ansible script
 spec:
   entrypoint: raw-source
   templates:
@@ -24,10 +24,10 @@ spec:
                 - name: source
                   value: "{{ inputs.parameters.source }}"
                 - name: tbot_configmap_name
-                  value: icarus-nodes-mngt-tbot-config
+                  value: hosting-mngt-tbot-config
                 - name: inventory_image_reference
                   value: oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest
                 - name: ansible_secret_name
-                  value: icarus-ansible
+                  value: ansible-secret
                 - name: ssh_domain
                   value: teleport.limbosolutions.com

deploy/hosting-mngt/workflowTemplates/kustomization.yaml

@@ -1,7 +1,7 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 resources:
-  - icarus-ansible-script.yaml
+  - hosting-mngt-ansible-script.yaml
 generatorOptions:
   disableNameSuffixHash: true
 

deploy/icarus-mngt/teleport-manifests/README.md

@@ -1,6 +0,0 @@
-# teleport
-
-``` bash
-tctl create -f deploy/icarus-mngt/teleport-manifests/manifest.yaml
-tctl bots update icarus-nodes-mngt --add-roles icarus-nodes-mngt
-```

hosting-mngt/workflows/nodes-get-info.yml

@@ -2,7 +2,7 @@ apiVersion: argoproj.io/v1alpha1
 kind: Workflow
 metadata:
   generateName: node-get-info-
-  namespace: icarus-nodes-mngt
+  namespace: hosting-mngt
 spec:
   imagePullSecrets:
     - name: oci-registry-secret
@@ -14,7 +14,7 @@ spec:
       steps:
         - - name: script-exec
             templateRef:
-              name: icarus-ansible-script
+              name:  hosting-mngt-ansible-script
               template: raw-source
             arguments:
               parameters:

hosting-mngt/workflows/nodes-update-os.yml

@@ -2,7 +2,7 @@ apiVersion: argoproj.io/v1alpha1
 kind: Workflow
 metadata:
   generateName: nodes-update-os-
-  namespace: icarus-nodes-mngt
+  namespace: hosting-mngt
 spec:
   imagePullSecrets:
     - name: oci-registry-secret
@@ -14,7 +14,7 @@ spec:
         - - name: script-exec
             templateRef:
               # /deploy/icarus-mngt
-              name: icarus-ansible-script
+              name:  hosting-mngt-ansible-script
               template: raw-source
             arguments:
               parameters:

hosting-mngt/workflows/tests-ansible-playbook.yaml

@@ -1,7 +1,7 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Workflow
 metadata:
-  namespace: icarus-nodes-mngt  
+  namespace: hosting-mngt
   generateName: tests-ansible-playbook-
   labels:
     workflows.argoproj.io/archive-strategy: "false"
@@ -25,12 +25,12 @@ spec:
 
         env:
             - name: ANSIBLE_VAULT_PASSWORD_FILE
-              value: /workspace/secrets/vault_password
+              value: /workspace/secrets/ansible_vault_password
 
             - name: ANSIBLE_BECOME_PASS
               valueFrom:
                 secretKeyRef:
-                  name: "icarus-ansible"
+                  name: "ansible-secret"
                   key: ansible_become_password
 
             - name: ANSIBLE_SSH_ARGS
@@ -64,7 +64,7 @@ spec:
           - name: identity-output
             mountPath: /opt/machine-id  
 
-          - name: icarus-nodes-mngt-tbot-config
+          - name: hosting-mngt-tbot-config
             mountPath: /etc/tbot
 
       volumes:
@@ -78,9 +78,9 @@ spec:
             pullPolicy: Always
         - name: ansible-secrets
           secret:
-            secretName: "icarus-ansible"
+            secretName: "ansible-secret"
         - name: identity-output
           emptyDir: {}
-        - name: icarus-nodes-mngt-tbot-config
+        - name: hosting-mngt-tbot-config
           configMap:
-            name: icarus-nodes-mngt-tbot-config
+            name: hosting-mngt-tbot-config

hosting-mngt/workflows/tests-download-private-oci.yaml

@@ -2,7 +2,7 @@ apiVersion: argoproj.io/v1alpha1
 kind: Workflow
 metadata:
   generateName: tests-download-private-oci-
-  namespace: icarus-nodes-mngt  
+  namespace: hosting-mngt  
   labels:
     workflows.argoproj.io/archive-strategy: "false"
   annotations:

hosting-mngt/workflows/tests-mylimbo-ansible-collections-global-tbot-script.yaml

@@ -1,9 +1,8 @@
 apiVersion: argoproj.io/v1alpha1
 kind: Workflow
 metadata:
-  namespace: icarus-nodes-mngt  
+  namespace: hosting-mngt  
   generateName: tests-mylimbo-ansible-collections-global-tbot-script-
-
 spec:
   imagePullSecrets:
     - name: oci-registry-secret
@@ -19,12 +18,13 @@ spec:
             arguments:
               parameters:
                 - name: tbot_configmap_name
-                  value: icarus-nodes-mngt-tbot-config
+                  value: hosting-mngt-tbot-config
                 - name: inventory_image_reference
                   value: oci.limbosolutions.com/mylimbo.infra.icarus/ansible-inventory:latest
                 - name: ansible_secret_name
-                  value: "icarus-ansible"
+                  value: ansible-secret
                 - name: source
                   value: |
                     ansible-playbook mylimbo.globals.host_maintenance.os_info
 
+

hosting-mngt/workflows/tests-teleport-tbot.yaml

@@ -2,7 +2,7 @@ apiVersion: argoproj.io/v1alpha1
 kind: Workflow
 metadata:
   generateName: tests-teleport-tbot-
-  namespace: icarus-nodes-mngt  
+  namespace: hosting-mngt  
 spec:
   entrypoint: exec
   serviceAccountName: argo-runner
@@ -11,9 +11,9 @@ spec:
       volumes:
         - name: identity-output
           emptyDir: {}
-        - name: icarus-nodes-mngt-tbot-config
+        - name: hosting-mngt-tbot-config
           configMap:
-            name: icarus-nodes-mngt-tbot-config
+            name: hosting-mngt-tbot-config
             
       container:
         image: alpine
@@ -36,5 +36,5 @@ spec:
           volumeMounts:
             - name: identity-output
               mountPath: /opt/machine-id
-            - name: icarus-nodes-mngt-tbot-config
+            - name: hosting-mngt-tbot-config
               mountPath: /config